[Serusers] HELP: How To Safely Allow Incoming INVITE Messages

[Kanakatti Mahesh Subramanya]

Tricky.
Do you mean "other SIP domain that you have no control over whatsoever"??

If so, you're probably stuck doing some basic src_ip matching
    if (src_ip==ip.address.of.other.domain) {
       rewritehostport("ip.address.that.i.want.it.to.go.to");
       if (!t_relay()) {
          blah; blah; blah;
       };
    };

if, you do have some relation with that domain, then you can just add a 
proxy_authorize.  i.e.

    if (src_ip==ip.address.of.other.domain) {
            rewritehostport("ip.address.that.i.want.it.to.go.to");
            if (!(proxy_athorize("my.domain", "subscriber")) {
                if (method!="ACK" & method!="BYE") {
                    proxy_challenge("aptela.com", "0");
                    break;
                };
            };
            if (!t_relay()) {
            blah; blah; blah;
        };
    };






Java Rockx wrote:

>Hi All.
>
>Can someone please show me an example ser.cfg snippet which allows __incoming__ INVITE messages
>from other SIP domains without becoming an open relay?
>
>Right now I www_challenge() when a REGISTER message comes in.
>
>I know I need to proxy_authorize() somewhere, but I'm not sure how to 
>
>Many Thanks!
>Paul
>
>
>		
>__________________________________ 
>Do you Yahoo!? 
>The all-new My Yahoo! - What will yours do?
>http://my.yahoo.com 
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mahesh.vcf
Type: text/x-vcard
Size: 332 bytes
Desc: not available
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20050116/0d96a5cd/attachment.vcf>